This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json) Hash identifier: lzV/XjQGIpyRg5r5/Qpoklzxwoqy+FYZ3QZ8L+zW2wc= Subject key identifier: 76:2D:38:A9:D9:E8:5C:D2:A0:4D:7E:67:CB:FF:45:1E:87:C7:51:20 Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 5DE5AC4A885CB1F503870DD7CD01E60996272CC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft Manifest number: 0357 Signing time: Mon 22 Dec 2025 09:52:53 +0000 Manifest this update: Mon 22 Dec 2025 09:47:53 +0000 Manifest next update: Thu 25 Dec 2025 10:02:53 +0000 Files and hashes: 1: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: vUWQBZ0/r7vI2v8KbhMfVsf4gR9LmNP6bUrY9mudCfU=) 2: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: 5/oWkRzGD5d5JR97V5ddrixucZBPsDQj6a4IdhEEwxU=) 3: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8=) 4: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: mP3dXLTjkrRr0prh2Jzplj5CirAMZtpiVu7s//8AY3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e5:ac:4a:88:5c:b1:f5:03:87:0d:d7:cd:01:e6:09:96:27:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: Dec 22 09:47:53 2025 GMT Not After : Dec 25 10:02:53 2025 GMT Subject: CN=762D38A9D9E85CD2A04D7E67CBFF451E87C75120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:6d:b4:3e:e4:bf:bc:45:1f:2b:9a:90:56: c3:f7:f7:69:80:b1:1c:da:33:58:31:a1:df:8f:f8: 66:42:a4:68:1c:87:28:41:92:88:72:24:0e:ca:13: 20:6d:df:1b:f9:c2:d0:66:93:7d:b7:d5:d3:59:85: d5:76:3b:c8:db:6d:da:1c:c8:58:04:0d:26:42:2f: 2d:92:08:71:73:d3:e5:cb:96:e4:1b:45:f7:3a:a2: d5:0a:62:76:14:32:53:f8:ba:4a:2b:c6:fe:8d:2f: 93:12:92:b3:25:5b:9d:95:e3:bb:8c:be:7c:67:df: 3f:f1:b3:f2:db:3f:aa:4c:9d:32:8a:bc:32:cc:3a: 7b:2d:4a:ad:07:69:a7:3b:6c:7a:08:fe:9b:4d:d8: a0:31:95:77:7d:55:a5:d8:d9:b2:d7:0d:f2:77:68: 7c:99:c1:41:34:be:12:c4:1f:bc:a1:f9:e6:7b:6e: c9:58:ef:78:92:bb:3c:7e:29:67:f2:7d:bd:5f:e2: 2b:aa:4d:dc:81:72:45:d2:0c:21:8e:55:1e:7f:fc: 24:41:b9:87:63:e2:5b:81:80:a4:8b:03:35:39:8a: 7d:97:b2:a4:cd:67:ab:4f:03:fd:84:67:c3:7a:64: ab:56:62:c8:be:21:db:95:4c:53:a0:dc:55:cd:fb: dc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2D:38:A9:D9:E8:5C:D2:A0:4D:7E:67:CB:FF:45:1E:87:C7:51:20 X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a6:03:95:6b:51:84:9b:18:e4:9f:68:42:96:46:df:07:1d: 95:59:13:25:a1:f9:11:90:e0:fb:a9:16:cb:d0:d6:9b:a2:89: 35:42:b9:15:6d:78:0e:48:8e:f1:13:85:dd:04:13:64:57:ef: b5:fd:e1:0c:60:67:5d:dc:45:1a:66:80:71:16:bd:83:7c:42: b7:c1:c1:2e:a8:71:b1:6f:9d:ff:38:24:c2:f7:62:d5:e6:2d: e8:5b:0b:ea:e3:75:04:5d:e9:ff:ae:98:3e:60:33:a8:23:9b: ae:b2:8d:24:7a:84:0b:02:8b:ad:69:6f:ef:01:de:7a:4e:f2: 02:5a:c4:31:41:2b:52:cb:e3:4a:6f:56:a8:27:bc:fb:4a:a3: a0:29:1b:80:23:29:7b:8d:4d:35:cd:1e:60:c8:bf:21:40:16: 45:42:47:87:c6:79:e6:03:95:fd:d8:d5:29:ad:57:54:3a:03: 67:e9:8e:f0:f1:83:75:bb:e9:68:01:f3:9b:cf:ff:ba:60:d1: d3:97:89:c8:6b:e7:8c:87:2f:66:32:77:e9:b7:14:50:ff:9e: 85:2a:79:0b:04:fd:b0:0f:b2:e6:09:99:a2:68:ab:f9:33:d6: 74:c3:4a:f6:6f:ea:a5:8e:40:32:54:1d:3a:d2:ee:27:45:66: 7c:cf:be:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXeWsSohcsfUDhw3XzQHmCZYnLMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNTEyMjIwOTQ3NTNaFw0yNTEyMjUxMDAyNTNaMDMxMTAvBgNV BAMTKDc2MkQzOEE5RDlFODVDRDJBMDREN0U2N0NCRkY0NTFFODdDNzUxMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvG20PuS/vEUfK5qQVsP392mA sRzaM1gxod+P+GZCpGgchyhBkohyJA7KEyBt3xv5wtBmk3231dNZhdV2O8jbbdoc yFgEDSZCLy2SCHFz0+XLluQbRfc6otUKYnYUMlP4ukorxv6NL5MSkrMlW52V47uM vnxn3z/xs/LbP6pMnTKKvDLMOnstSq0Haac7bHoI/ptN2KAxlXd9VaXY2bLXDfJ3 aHyZwUE0vhLEH7yh+eZ7bslY73iSuzx+KWfyfb1f4iuqTdyBckXSDCGOVR5//CRB uYdj4luBgKSLAzU5in2XsqTNZ6tPA/2EZ8N6ZKtWYsi+IduVTFOg3FXN+9zzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdi04qdnoXNKgTX5ny/9FHofHUSAwHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6mA5VrUYSbGOSfaEKWRt8HHZVZEyWh+RGQ 4PupFsvQ1puiiTVCuRVteA5IjvEThd0EE2RX77X94QxgZ13cRRpmgHEWvYN8QrfB wS6ocbFvnf84JML3YtXmLehbC+rjdQRd6f+umD5gM6gjm66yjSR6hAsCi61pb+8B 3npO8gJaxDFBK1LL40pvVqgnvPtKo6ApG4AjKXuNTTXNHmDIvyFAFkVCR4fGeeYD lf3Y1SmtV1Q6A2fpjvDxg3W76WgB85vP/7pg0dOXichr54yHL2Yyd+m3FFD/noUq eQsE/bAPsuYJmaJoq/kz1nTDSvZv6qWOQDJUHTrS7idFZnzPvis= -----END CERTIFICATE-----Generated at Wed Dec 24 03:36:58 2025 by rpki-client